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ABSTRACT 


This thesis is concerned with the use of the digital 
computer to realize cryptography. Three cryptographic 
systems: simple substitution, pseudo-random cipher 
(polyalphabetic cipher), and data-keyed cipher, are 
designed, implemented through computer programming, and 
evaluated. A suitable cyclic error correcting code is 
designed to encode these systems for transmission. The 


code is tested by simulating a noisy channel. 
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te (SEE ENE TZONS 


The following definitions are given to acquaint the 
reader with some of the terms commonly encountered in the 
field of cryptography. 

Cryptology is the branch of knowledge that deals with 
the development and use of all forms of secret communication. 

Cryptography is the branch of cryptology that deals 
with secret writing. 

Cryptanlaysis is the branch of cryptology that deals 
with the analysis and solution of cryptographic systems. 

A Cipher is a cryptographic system which conceals, 
in a cryptographic sense, the letters or groups of letters 
meee message or plaintext. 

Enciphering is the operation of concealing a plaintext, 
ameeche result is a cipher text, or in general a cryptocram. 
Deciphering is the process of discovering the secret 

meaning of a cipher text. 

A key is the variable parameter of a cipher system, 
prearranged between correspondents, which determines the 
specific application of a general cipher system being 
used. The use of keys permits almost endless variations 
within a given cipher system. In fact, the value of a 
specific cipher system is based on how hard it is for an 
"enemy" to break a cryptogram or series of cryptograms, 


assuming he knows the complete details of the system but 
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lacks the keys which were used to encipher the cryptograms 
originally. 

A code is a cryptographic system which Sn SSeS 
symbol groups for words, phrases, or sentences found in 
the plaintext. It involves the use of a codebook, copies 
of which are kept by each correspondent. 

Encoding is the operation of concealing a message 
uSing a code. 

Decoding is the process of recovering an encoded 


message. 


A code differs from a cipher because a code deals with 
plaintext in variable size units, such as words or phrases, 
while a cipher deals with plaintext in fixed size units, 


usually a letter at a time. 


Ege 





II. INTRODUCTION 


Since there is no way of making data communication 
links physically secure, particularly if some form of radio 
fransmission 1s involved, encryption is the only practical 
method of protecting the transmitted data. In the commer- 
Cial world and nonmilitary parts of government, there is a 
growing need for encryption. This need for encryption is 
not just to satisfy the legal requirements for privacy, 
but also to protect systems from criminal activities. 

At the present time, communication systems seem to be 
going towards digital means. There are already in use 
digital systems for data communications as well as for 
public services such as the telephone system. 

The present work was intended to study the possibility 
of uSing a digital computer to realize cryptographic systems. 
Further, this computer can be envisioned as part of a digital 
communication system, mainly to do cryptography and to 
implement suitable error correcting codes. The DEC 
PDP-11/40 minicomputer was used to do this study. 

Through this work, three cryptographic systems were 
designed, ranging from a simple substitution cipher to a 
data-keyed cipher. On the latter the message itself con- 
stituted the key to modify other characters. Very signi- 
ficant results were obtained from it in the sense that it 


gives rise to a text where its characters were nearly 
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equiprobable. Further, a cyclic error correcting code 
was designed and implemented to work with these 


cryptographic systems. 
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III. HISTORICAL BACKGROUND 


some of the earliest practical crytographic systems 
were the monoalphabetic substitution systems used by the 
Romans [{Ref. 1]. In these, one letter is substituted for 
another. For example, an A might be replaced by aC. 

By the fifteenth century, an Italian by the name of Alberti 
came up with a technique of cryptoanalyzing letters by 
frequency analyses. As a result, he invented probably the 
first polyalphabetic substitution system using a cipher 
disk. Thus, he would rotate the disk and encode several 
more words paren ete next substitution alphabet. 

Early in the sixteenth century Trithemius, a Benedic- 
tine Monk, had the first printed book published on cryp- 
tology. Trithemius described the square table or tableau 
which was the first known instance of a progressive key 
applied to polyalphabetic substitution. It provided a 
means of changing alphabets with each character. Later in 
the sixteenth century, Vigenere perfected the autokey; a 
progressive key in which the last decoded character led to 
the next substitution alphabet in a polyalphabetic key. 
These were basically the techniques that were widely applied 
in the cryptomachines in the first half of the twentieth 
century. Various transposition techniques have been em- 
ployed including the wide use of changing word order and 
techniques such as rail transpositions (used in the Civil 


War). 
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In 1883, Auguste Kerckhoffs, a man born in Holland but 


a naturalized Frenchman, published a book entitled La 


Cryptographic Militaire. In it, he established two general 


principles for cryptographic systems. They were: 


1. 


A key must withstand the operational strains of 
heavy traffic. It must be assumed that the enemy 
has the general system. Therefore, the security 

of the system must rest with the key. 

Only cryptoanalysts can know the security of the 
key. In this, he infers that anyone who proposes a 
cryptographic technique should be familiar with 


the techniques that could be used to break it. 


From these two general principles, six specific require- 


ments emerged in his book: 


Le 


The key should be, if not theoretically unbreakable, 
at least unbreakable in practice. 

Compromise of the hardware system or coding tech- 
nique should not result in compromising the security 
of communications that the system carries. 

The key should be remembered without notes and 
should be easily changeable. 

The cryptograms must be transmittable by telegraph. 
Today this would be expanded to include both digital 
intelligence and voice (if voice scramblers are 
employed) utilizing either wire or radio as the 


medium. 
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5. The apparatus or documents should be portable and 
operable by a single person. 

6. The system should be easy, neither requiring 
knowledge of a long list of rules nor involving 
mental strain. 

In 1917 Gilbert S. Vernam, a young engineer at American 
Telephone and Telegraph Company, using the Baudot code 
(teletype) invented a means of adding two characters 
(exclusive or). Vernam's machine mixed a key with text 


as illustrated by the following: 


Clear Text 1 LE ¢ eee LS! EE 


Key oO 1 0 1 90 
Coded Character 1 1101 


To derive the text from the coded character, all that was 
required was the addition of the key again to the coded 


character. 


Coded Character 1 1 1 01 


Key Oo 10 41 0 
Clear Text L ©). wei st 


His machines used a key tape loop about eight feet long 
which caused the key to repeat itself over a high volume 
of traffic. This allowed cryptoanalysts to derive the 
key. William F. Friedman, in fact, solved cryptograms 


using single-loop code tapes but appears to have been 
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unsuccessful when two code tapes were used. Major Joseph 
Om Mauborgne {U.S. Army) then introduced the one-time 

code tape derived from a random noise source. This was 
one of the first theoretically (and in practice) unbreaka- 
ble code systems. The major disadvantage of the system 
was the enormous amounts of key required for high-volume 
ther lic. 

During the 1920's and 1930's, the rotor-code machines 
having five and more rotors, each rotor representing a 
scrambling step, were developed. They proved relatively 
insecure, requiring only high-traffic volume for the 
cryptoanalyst to break them. In fact, the Japanese used 
a code-wheel-type machine for their diplomatic communica- 
tions well into World War II. It was vulnerable to crypto- 
analysis, and William F. Friedman and his group not only 
solved the code but reconstructed a model of the machine 
to break Japanese diplomatic correspondence. Thus, Presi- 
dent Roosevelt and others were aware of the impending break 
in diplomatic relations with Japan just prior to World 
War II. 

The code wheels (or rotors) were nothing more than 
key memories storing quantities of key which could easily 
be changed by interchanging rotor positions, specifying 
various start points for each rotor, and periodicaly re- 
placing a set of rotors. This provided a means of producing 


what is called key leverage. 
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The advent of electronic enciphering systems substan- 
tially replaced the mechanical cryptographic machines. 

And, further the appearance and fast development of digital 
logic is offering new tools to modern crypto designers. 
References (2), (3) and (4) from the Bell System Technical 
Journal provide interesting literature on Digital Data 
Scramblers. 

Today, the most commonly encountered commercial crypto- 
system is based on the "Shift register," [Ref. 5]. Despite 
design variations, shift registers are used as pseudorandom 
key generators. The implementation of data scramblers with 
pseudorandom sequences using logic circuits is suggested 
by Twigg [Ref. 6], and Henrickson [Ref. 7]. The idea of 
shift register sequences is well treated by Golomb [Ref. 8]. 
The relative weakness of pseudorandom codes is pointed by 
Meyer and Tuchman [Ref. 9], from I.B.M. For high security, 
Torrieri [Ref. 10], and Geffe [Ref. 11], introduce the idea 
of using nonlinear as well as linear operations. The theory 
of nonlinear operations is also contained in Ref. 8. 

Finally, the appearance of modern high speed digital 
computers has risen speculation as how best to apply its 
capabilities since it is available for both cryptography 
and cryptanalysis. Even the newest microprocessors are 
reported [Ref. 12], as being designed for encription 
devices. 

A very comprehensive historical exposition with some 


descriptive technical content is the book by Kahn, The 


ape: 





Codebreakers [Ref. 13], which appeared in 1967. Of special 
interests are the sections devoted to the cryptographic 
agencies of themajor powers, including the United States. 
For the interested reader in the field of cryptography, 
the American Cryptogram Association publishes "The Crypto- 


gram," a bimonthly magazine of articles and cryptograms. 
The hobby of solving cryptograms provides a fascinating 
intellectual challenge. Patient analysis and flashes of 
insight, combined with the enthusiasm of uncovering 


something hidden, give cryptanalysts an enjoyment which is 


almost unique. 
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IV. THEORY OF SECRECY SYSTEMS 


A. INTRODUCTION 

A secrecy system is defined as a set of transformations 
of one space (the set of possible messages) into a second 
space (the set of possible cryptograms). Each particular 
transformation of the set corresponds to enciphering with 
a particular key. The transformations are supposed rever- 
sible (non-singular) in order to obtain unique deciphering 
when the key is known together with the specific system 
used. 

Each key and therefore each transformation is assumed 
to have an a priori probability associated with it. Simi- 
larly each possible message is assumed to have an associated 
a priori probability of being selected for encryption. 
These two represent the a priori knowledge of the situation 
for a cryptoanalyst trying to break the cipher. 

To use the system a key is first selected and sent 
to the receiving point. The choice of a key determines a 
particular transformation in the set forming the system. 
Then a message is selected and the particular transformation 
corresponding to the selected key is applied to the message 
to produce a cryptogram. This cryptogram is transmitted to 
the receiving point by a channel where it can be intercepted 
by an undesired agent. At the receiving end, the inverse 


of the particular transformation is applied to the cryptogram 
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to recover the original message. Figure 1 provides the 


conceptual idea of a secrecy system. 


(\ undesired 
agent 
MESSAGE | message 
>t ENCIPHERER >| DECIPHERER 
SOURCE 
cryptogram message 
7X 
key 
key 
KEY 
SOURCE 


Figure 1. A Secrecy System. 


If the referred undesired agent intercepts the trans- 
mitted cryptogram through a channel, he can calculate from 
it and from his possibel knowledge of the system being used, 
the a posteriori probabilities of the various possible 
messages and keys which might have produced this cryptogram. 
This set of a posteriori probabilities constitutes his 


knowledge of the key and message after the interception. 
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The calculation of the a posteriori probabilities is the 


generalized problem in cryptanalysis. 


C. PERFECT SECRECY 

Shannon [Ref. 14], provides for concepts such as 
entropy, redundancy, equivocation and many others that are 
helpful for evaluating secrecy systems. 

Let uS assume that the message space is constituted 
by a finite number of messages Py Por sees Ee With an 
associated a priori probabilities p(P,), p(P.), ee p(P) 
and that these messages are mapped into the cryptogram 


space by the transformation 


The cryptanalyst intercepts a particular C. and can 
then calculate the a posteriori conditional probability 
for the various messages, p(P./C.). It seems natural now 
to define that one condition for perfect secrecy is that for 
all Cy, the a posteriori probabilities of the messages P 
given that C. has been received, are equal to their a 
priori probabilities, independent of these values. Or, 
from an information theory viewpoint, intercepting the 
cryptogram has given the cryptanalyst no information about 
the message; he just knows that a message was sent. On 


the other hand, if this condition is not satisfied there 


will exist situations in which the cryptanalyst has certain 
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a priori probabilities and certain choices of key and 
message thus preventing perfect secrecy to be achieved. 
Shannon [Ref. 15], gives a theorem stating the necessary 


and sufficient conditions for perfect secrecy, namely 
P(C/P) = p(C) 


Bor all the messages (P) and all the cryptograms (C). 


Where 


p(C/P) = Conditional probability of crypto- 
gram C to occur if message P is 
chosen. 

pie) = Probability of obtaining cryptogram 


C for any cause. 


Stated in other terms, the total probability of all 
keys that transform PB into a given cryptogram C is equal 
to that of all keys transforming eo into the same C, for 
all Pas ve ana -C. 

In the Mathematical Theory of Communications given by 
Reference 14, it was shown that a convenient measure of 
information was the entropy. For a set of events with 


probabilities Py: Por coer Pye the entropy H is given by: 


can 7 Ps log Ps 
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In a secrecy system there are two choices involved, that 
of the message and that of the key. We may measure the 
amount of information produced when a message is chosen 


by 


H(P) = -Zp(P) log p(P) 


the summation being over all possible messages. Similarly, 
there is an uncertainty associated with the choice of key 


given by 


H(K) = - 2p(K) log p(X) 


For perfect secrecy systems the amount of information 
in the message is at most log n (occurring when all messages 
are equiprobable). This information can be concealed 
completely only if the key uncertainty is at least log n. 
In a more general way of expressing this: There is a 
limit to what we can achieve with a given uncertainty in 
key, the amount of uncertainty we can introduce into the 
solution cannot be greater than the key uncertainty. 

The situation gets more complicated if the number of 
messages is infinite. For example, assume that messages 
are generated as infinite sequences of letters by a suitable 
Markoff process. From the definition, no finite key will 
give perfect secrecy. We can suppose then, that the key 


source generates keys in the same manner, that is as an 
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infinite sequence of symbols. Suppose further that only a 
certain length Ly is needed to encipher and decipher a 
length Ly of message. Let the logarithm of the number of 
letters in the message alphabet be R, and that for the key 
alphabet be R,- Then from the finite case, it is evident 


that perfect secrecy requires 


This type of perfect secrecy is obtained by the Vernam 
system [Ref. 16]. 

Thus, it can be concluded that the key required for 
perfect secrecy depends on the total number of possible 
messages. The disadvantage of perfect systems for large 
correspondence systems such as for data communications and 
data retrieval services, is the equivalent amount of key 
that must be sent. 

In this paper the requirement for a large key for large 
messages is eliminated by designing a self keyed system 
that will continually originate key letters based on several 
past letters that were already ciphered. Provided enough 
distance is chosen in between selected letters the system 
will avoid the statistical dependency of consecutive letters 
in a natural language, thus generating a sequence of key 


letters suitable for any message length. 
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D. EQUIVOCATION 

A cryptographic system can be compared with a communi- 
cation system in the sense that whereas in one the signal 
is unintentionally perturbed by noise, and in the other, 
namely the cryptographic system, the message is inten- 
tionally perturbed by the ciphering process to hide the 
information. Thus, there is an uncertainty of what was 
actually transmitted. From information theory a natural 
mathematical measure of uncertainty is the conditional 
entropy of the transmitted signal when the received signal 


is known. This conditional entropy is known as equivocation. 


H(X/Y) = -ZIp(x,y) log p(x/y) 


From the point of view of the cryptanalyst, a secrecy 
system is almost identical with a noisy communication 
system. The message is operated by a statistical element, 
the enciphering system, with its statistically chosen key. 
The result of this operation is the cryptogram, which when 
transmitted is vulnerable to interception and available for 
analysis. The main differences in the two cases are: 

1. The operation of the enciphering transformation 
is generally of a more complex nature than the perturbing 
noise in a channel. 

2. The key for a secrecy system is usually chosen 


from a finite set of possibilities while the noise in the 
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channel is more often continually introduced, in effect 
chosen from an infinite set. 

With these considerations in mind it is natural to use 
the equivocation as a theoretical secrecy index. It may 
be noted that there are two significant equivocations, 
that of the key and that of the message which are denoted 


as H(K/C) and H(P/C): 


H (K/C) 


-~ 2 p(C,K) log p(K/C) 


HCE C) 


-2p(c,P) log p(K/P) 


The same general arguments used to justify the equivo- 
cation as a measure of uncertainty in communication theory 
apply here as well. Zero equivocation requires that one 
message (or key) have unit probability and all others zero, 


corresponding to complete knowledge. 


E. IDEAL SECRECY SYSTEMS 

In Reference 15, the concept of equivocation leads to 
means of evaluating secrecy systems as a function of the 
amount of N, the number of letters received. It is shown 
that for most systems as N increases the referred equivo- 
cations tend to decrease to zero, consequently the solution 
of the cryptogram becomes unique at a point called unicity 
poeant . 

In the section on Perfect Secrecy it was stated that 


perfect secrecy requires an infinite amount of key if 


P| 





messages of unlimited length are allowed. With a finite 

key size, the equivocation of key and message generally 
approaches zero. The other extreme is for H(K/C) to be 

equal to H(K). Then, no matter how much material is 
intercepted, there is not a unique solution but many of 
comparable probability. An ideal system can be defined as 
one in which H(K/C) and H(P/C) do not approach zero as 

N increases. A strongly ideal system would be one in which 
H(K/C) remains constant at H(K), that is, knowing the crypto- 
gram has not aided in solving the key uncertainty. 

An example of an ideal cipher is a simple substitution 
in an artificial language in which all letters are equi- 
probable and successive letters independently chosen. 

With natural languages it is in general possible to 
approximate the ideal characteristic. The complexity of 
the system needed usually goes up rapidly when an attempt 
is made to realize this. To approximate the ideal equivo- 
cation, one may first operate on the message with a trans- 
ducer which removes all redundancies. After this almost 
any simple ciphering system — substitution, transposition, 
etc., is satisfactory. The more elaborate the transducer 
and the nearer the output is to the desired form, the 
more closely will the secrecy system approximate the ideal 
characteristic. 

The work to be presented in following sections, will 
describe a scheme to approximate the ideal secrecy system 


by using a digital computer to mainly accomplish two things: 
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1. Change the probability structure of natural languages 
to obtain an almost equiprobable occurrence of letters. 

2. Eliminate the statistical dependence of successive 
letters in natural languages. 

Further, a message transformed to reflect these 
properties, will be either transmitted as such or an addi- 


tional conventional ciphering can be made. 
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V. DIGITAL SUBSTITUTION 


The development of a digital substitution cipher was 
the first step taken to accomplish the present work. 
After it, more complex variations were experimented to 
obtain a reasonable secure system taking advantage of the 
use of the computer. Thus, it can be said that most of the 
subsequent work rests on these first results. A brief 
explanation follows of the Decwriter system and its character 


codes used to interface with the PDP-11/40 computer. 


A. THE DECWRITER SYSTEM 

The LCll Decwriter system is a high-speed teletype- 
writer designed to interface with the PDP-1ll family of 
processors to provide both: Input (keyboard) and output 
(printer) functions for the system. It can be used as the 
console input/output device. The system can receive 
characters from the keyboard or can print at speeds up to 
30 characters per second in standard ASCII formats. The 
character code used is USASCII-68 which is listed in Table 
No. I. From these 128 characters, only 64 are printing 
characters, those of columns 2, 3, 4 and 5. Table No. II 
presents these 64 characters and their correspondent 


binary representation. 
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TABLE I - USASCII-68 CHARACTER CODE 


Bo 








SP 10100000 


f 


10100001 
10100010 
10100011 
10100100 
10100101 
10100110 
mot COLT TL 
10101000 
10101001 
10101010 
OR OmO 11 
BO Oa ak0i0 
HOTOLIOL 


HOLOLI10 


BOO LT 


Ww NH F 


J 


10110000 
10110001 
10110010 
20 POOL: 
10110100 
oO OO 
POLO 110 
OO Tee 
10111000 
186 Jiu eOuo al 
ACO TEA COMES, 
Our Otel 
LOTLLTOO 
0 2 ala ee ak 


Oe EO 


TOLD ay 


QO ww Pp ww 


) 


tH 


ES 


N 


11000000 
11000001 
11000010 
PEOO UCT 
LLO000100 
11000101 
LLOGOI2r6 
JN 06/9 GIG AE 
LECOLEGO 
PEOOSOGE 
gabe fOMGe2k(e 
EEOO Ey 
11001100 
LEQOLLO EL 


LTO O05 


PLOC ra 


wy oO 9 


11010000 
11010001 
11010010 
11010011 
11010100 
11010101 
11010110 
11010111 
11010000 
11011001 
11011010 
11011011 
110}1100 
11011101 


Ona @ 


dO Tee 


TABLE II - DECWRITER PRINTING CHARACTERS AND 
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B. APPLICATION OF GROUP THEORY TO CRYPTOGRAPHY 

A group is defined as a set of elements a, b, c, ... 
and an operation, denoted by + for which the following 
properties are satisfied: 

a) For any elements a,b, in the set, a + b is in the 
set. 

b) The associative law is satisfied; that is, for 


any a,b,c in the set 


at (b+c) = (a tb) +e 


c) There is an identity element, I, in the set such 


that 


at+tIe2=+1I+a2=7a; allaiin the set. 


‘ -l] . 
dad) For each element a, there iS an inverse a in 


the set satisfying 


A group is abelian or commutative if 


atb=bta for all a and b in the set. 


The integers under ordinary addition and the set of 
binary sequences of a fixed length n under exclusive-or 
operation are examples of abelian groups. 
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From boolean algebra, an additional property of an 
abelian group of binary sequences of a fixed length n 


under the exclusive-or operation is that, 


given atbe=c 
then atce=b 
and b +c = a; for all a,b and cin 


the group. 


The 8-bit binary sequences with which the computer 
handles the ASCII code characters is in this sense an 
abelian group. This last property suggested the idea of 
encrypting simply by exclusive-oring the desired set of 
sequences by a key (another sequence or a set of sequences). 
Decrypting or recovery of the original sequences can be > 
done simply by exclusive-oring the obtained set of sequences 
With the key. 


Basically the transformation can be expressed as 


Gr= Kat Py for encryption, and 


P=K+C, for decryption, 


where C, K and P represent an 8-bit sequence stored in a 
register and the symbol + stands for the logical exclusive- 


or operation. 
While it is clear that the whole ne 8-bit sequences 


can be used to represent crypto sequences, Since this set 
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of sequences constitute an abelian group; a limitation was 
imposed through this work to allow transformations to be 
done between printing characters (those of Table II). 
That is, restrict the domain and range of the transforma- 
tions to the binary sequences of Table II. 

We can further realize the 12 possible combinations 
of two sequences of same or different sets by exclusive- 
oring them and observe that the range of the transformations 


is given by the sets of sequences whose 4-left most are: 


000 0 for A+aA 
0001 for 


Cc D 
D Cc 
O11 0 or A+c 
Cc A 
B D 


Oo 


Oe a for A + 


Oo 
a 
Q »-P 
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C. TRANSFORMATIONS 

From Table II it can be observed that these sequences 
no longer form a group under the exclusive-or operation, 
Since choosing any two sequences will originate a new 


sequence not in the referred table. For example: 


Plaintext character =A= 11000001 + 
Key character = L=11001100 
Ciphered character = OtOsOr0s rT 0 1 


And we obtained a sequence 00001101 #£not in the table. 
If we observe sets A, B, C and D of Table II, we will 

observe that each set has its 4-left most bits equal. Or 

that the dom ain of the transformation is given by the 


sequences whose 4-left most bits are: 


Set A 1010 
Set B loll 
Set C 1100 


Set D iO oi 


In order to make the range of the transformations equal 
to its domain in accordance with the restriction imposed, 
an additional binary multiplier: The intermediate key (IK) 
was devised. It allowed for mapping into the 64 printing 


characters. 
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The value of IK is dependent on the particular transfor- 
mation desired and the key to be used. For example: 
A system is designed to transform characters from set B 
into characters of set C for encryption. The decryption 
is done by doing the inverse. Now assume that the key to 


be used for a particular transformation belongs to set D. 


H 
ro) 
H 


Plaintext character 10111000 (Set B) 


li 
i) 
Hl 


Key character 11011010 (Set D) 


01100010 
IK = 10100000 


Crypto character = B = 11000010 (Set C) 


The intermediate key value was obtained by exclusive- 
oring the 4-left most bits of the plaintext, the key and 


the crypto characters, as shown below. 


Plaaincext Cnaracter aOavy ce 
Key character 110 1 ae 
Crypto character 1100 


IK 10100000 


For decrypting the inverse is done, that is: 


a7 








Crypto character = B = 11000010 (Set C) 


Key character = Z = 11011010 (Set D) 
00011000 


IK = 10100000 


Plaintext character = 8 = 10111000 


Based on the concepts so far presented and the idea 
of the intermediate key multiplier, that allows for sequences 
of Table II to behave like a group, Table III was con- 
structed. It gives the necessary values of IK for all 
possible transformations in between sets. From this general 
table, it can be obtained typical tables of required values 
of IK for each specific transformation. For example, if 
we assume-that the desired transformation between the four 


sets were 


encryption encryption 
/ decryption o f decryption Y\ 
A’ Cc B D 
R decryption / R decryption / 
encryption encryption 


Then the required table of IK values will be: 
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D. SIMPLE SUBSTITUTION 

Although the scheme developed and presented until now 
provides for transformations using the 64 printing charac- 
ters, a restriction was placed to be able to handle only 
the 26 letters of the English alphabet plus the additional 
6 characters that appear in Table No. II, sets C and D. 
Thus, for the simple substitution ciphers transformations 


were designed between these two sets, that is, 


Encryption 


/ Decryption 4 


C D 


R Decryption / 


Encryption 


And the corresponding table of values of intermediate keys 


will be: 
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Figure 2 shows in block diagram the computer realization 
of this simple substitution cipher. Appendix A gives the 
complete program to accomplish this. Figure 3 is an 


example of this cipher. 


E. GRAPHICAL REPRESENTATION OF RESULTS 

Natural languages, such as English, Spanish, German, 
French, etc., have a characteristic letter frequency. For 
example, the normal frequency for English is as shown in 
Table IV. 

For the purpose of observing the statistical nature 
of plaintexts as well as of cryptograms obtained, a computer 
program (shown in Appendix B and C) was made to realize 
the following computations: 


- Count the number of occurrences of each letter in 
a text. 


- Calculate and plot the percentage of occurrence of 
each character in the text. 


- Calculate the mean value of percentage of occurrences. 


~ Calculate the standard deviation of the percentage of 
occurrences. 
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Identify key 
set and assign 
identifying 
number to it 
(R3)=1 SETA 
(R3)=3 SET B 
(R3)=5 SET C 
< D 








Assign an inter 
mediate depen- 
ding on key and 
plaintext 

character sets 


R4 IK 





Transformation 
Exclusive Or 


Key + P + IK 





Output 


| crypt. 
character 







Figure 2. Block diagram of the program for the 
simple substitution cipher 
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te cee MF ls Ee ee et it Ee ab 


eereeemec =f ee PES GMECLPETNARIT LY Poe Ue AS ALP eS Sea. 


Meier eet INI t MP OCRMATION_THEGEY_SUILTHELE Fir Bane 
Sete SoM NOSATREMATICTANS_@_ITOIS-HSSUMED_TAHAT LTAE LEER 
Pees SUME_ UNCERSTAHOING_OF FRESHMAN_CALCULUS _AWDLELEeH 
meme ew eCRREILITY ANG_IWN_THE-LATER_ CHAPTERS SONE_IMTEOE 
pete ee nee OPH P ROCESS THEGCRY_@_ UHFURTUNATELY THERE FS oN 
Pee OUT RENE T TRATIS_ HAR GER_TO_HEE?T oS = THER REAG ESS 


Peed oof eEASHWABLE _ LEVEL _OF MATHEMATICAL MRI UR TTY 


a) Plaintext message (input) 


WE CHUNHSHOOHSRD PYESHGE“SVECCMHQSEHEOCRAYDHVHGECCHNEWE 
HPEVWVOSBEYCEHECSACH YH VEXEZYC MVHC LU PSENHDOE CVU RRES EHUD HF 
WEOPREEDCHVYSHEVO_REVEOT OV DHMH OCH OHYOORERESHE _VCREL_RRERY 
SREH_VWOHEMERHEVSREDOCVYSOVPHROHGEROLEVSHTVE TEC SOHY YORE Be 
BYCVEMHGEXUVUTD “CNHYYSHOVHO_&HE YOCREHT_VGCREDHOSERHUVCESS 
ETOCMENHEVYSMEHGEXTROCHC_RENENHHHEVONECEYVCREC NROC_RERR OOHRS 
RPHEXERHERFE“ERGRYCHC_YOCH OH _VESREHCRHZRECHWHC_LRRERVOREHE 


BOCH VARBHVHERVOSYWUL RHO RAR CHSGHEYOC_REVOCTYCHEYCEE OOH 


b) Cryptogram message (output) 


Figure 3. Example of a simple substitution 
cipher: Encrypting process. Key = W 
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Alphabetically By frequency 


A = 71.3% Ee 23.0% 
Boe Oso i) =e 
So ES Ni aa 
D- 4.4 eae ated 
2 eee Cree Tn = 18 
epee 126 S 8 ean far 
Gro = 1.6 1a ne 
Ho 3.5 S = «623 
me) oe D- 4.4 
Crea Un Z |: ee 
kee- -0.53 ion “Jeo 
Ue ee ee C= oS e0 
Mees 2.) PO ae 
Ne fe 7 38 B= 27 
OC) eg ar Ua 
ee eg t = eS 
Css 0.3 0 Ie ccm eri, 
ig, as ee CO ae es (3 
Sao) 6.3 oe as 
Mei 953 Va eS 
Os Aral nem 8), 
Veee- 1.3 x = 05 
ie = 6 K> GS-03 
Moo Od OG «= Use 
oy |v oe a Oe 
i ee Oral Zi tee 


TABLE IV - FREQUENCY OF THE LETTERS OF THE ENGLISH 
ALPHABET, ARRANGED ALPHABETICALLY AND BY 
FREQUENCY 
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For each transformation done, the text was analyzed 
by this program and the results were plotted. In the 
horizontal axis are the 32 chosen characters in the 


following order from zero to 3l: 
@ABCDEFGHIJKLMNOPQRSTUVWXYZ Oe Aas a 


In the vertical axis the percentage of occurrence scale 
or frequency distribution is plotted. 

Examples of these plots are given by Figures 5 to 8. 
There the frequency distribution of letters for the 


following languages is plotted: 


Figure 4: ENGLISH 
Figure 5: SPANISH 
Figure 6: FRENCH 
Figure 7: ITALIAN 


The author has preferred to give the results achieved 
through this work by presenting these plots rather than 
giving messages and their cryptograms as examples of what 
was obtained. Inherent with these plots is an evaluation 
of the system used in each case. Additional information 
that will be found in these plots is the standard deviation 
of percentage of occurrence of the character in each 


cryptogram. 
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For the simple substitution cipher, it was expected 
to obtain similar results as for the plaintext of Figure 5. 
Figures 8 to 10 show the frequency distribution of characters 
when this system was used with different keys. As expected, 
Similar results were obtained but with the values changed 
from one character to another. This occurred since one 
character or letter has just been replaced by another 
through these transformations. Table V presenting in 
tabular form the number of occurrences for these substitu- 
tions gives a figure of what has occurred with the messages 
in each case. 

In Section IV, Theory of Secrecy Systems, it was stated 
that one goal to achieve ideal secrecy was to change the 
probability structure of natural languages to obtain an 
equiprobable occurrence of letters. This is the reason why 
the calculation of standard deviation was considered to 
evaluate secrecy obtained. Since the language to be used 
in this present work will be English it may be useful to 
keep in mind that the standard deviation for an English 


text is 3.81 as stated in Figure 4. 


F. PSEUDORANDOM SUBSTITUTION 

The simple substitution cipher can also be called 
monoalphabetic cipher since there is only one alphabet 
to encipher the message. The cryptanalytic weakness of 
this cipher is the fact that a given plain language letter 


is always represented by the same crypto letter. 
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NUMBER OF OCCURRENCES 


K E Y 
Character: @ A C G K N 
@ 24 3 Td 7 0 0 
A 3 24 94 lez 0 248 
B 94 77 5 ay; 24 0 
ce a 94 24 128 4 0 
D 128 ou i 77 248 0 
E 37 15278 12 94 0 0 
F ey) 7 oF 3 0 4 
G 7 12 128 24 0 24 
H 4 24 0 248 77 iL, 
if 24 4 0 0 94 7 
J 0 0 24 0 3 Zs 
K 0 0 4 0 24 on 
L 0 0 248 0 i 94 
M 0 0 0. G 12 re 
N 0 248 QO 24 7) 24 
O 248 0 0. + 1213 3 
P Hak 105 27 22 3} 68 
Q IBONS: 11 Ixy! B2 3 os 
R ay 27 es 160 1G S35 
S 37 27 11 33 63 48 
ah 35 160 a2 27 ors 3) 
U ¥ 60 35 32 27 68 3 
V 32 12 160 103 48 63 
W 12 By 8 A 33 76 
X 63 76 3 aS 27 87) 
iy 76 63 3 68 Za Zz 
Z 3 3 76 48 105 33 
[ 3 3 Es) 355) 11 160 
vA 33 48 93 3 ay 27 
J 48 33 68 3 32 27 
. 68 23) 48 76 160 al. 
a8 68 os 63 33 ALON) 
Table No. V .- Simple substitution cipher 
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In this section, a digital polyalphabetic substitution 
very much alike to the Vigenere square, cited by Sinkov 
[Ref. 17], 1s designed. The originality of the scheme 
presented here is the fact that the different alphabets 
are used in a pseudorandom way and that this is generated 
through a simple algorithm in the computer. 

The basis for the program to realize this cipher is 
provided by the same algorithm as for the simple substitution 
case, the only variation being that the key will change for 
each character to be ciphered. These changes of key are 
controlled by a program and thus the inverse transformation 
can be made to decipher by using the same program. This 
fact that we are using a different key each time is the 
same as using a new substitution alphabet for each character. 

It must be set clear here that the key used was a single 
letter and not a number of letters equal to the message 
length. This single letter was used to initialize a register 
used as a counter. For each new letter of the message 
the register contents were increased by one each time until 
a specific number was reached, in which case the register 
was reset fe zero. This specific number is the desired 
number of alphabets to be used. Figure ll gives a graphical 
idea of how this was accomplished. In the figure, N 
represents the total number of alphabets to be used; it 
ranges from one, for a simple substitution, to 32 when using 


all the possible alphabets. 


aps 












Substitution 
Program 


(Same as Fig. 2) 


Set register 
tO zero. 


New key 





Figure 11. Psuedorandom cipher block diagram 
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The result expected for this cipher was the origination 
of an artificial language with 32 possible characters and 
with a letter frequency different than that of the plaintext 
message in natural English language. 

To observe the results of this cipher two sets of 
transformations were made: 

1. Using 15 alphabets and six different keys. 
The keys used were: 
a) @ 
b) A 
c) c 
d) G 
e) K 
3) N 
2. Using a single key and different number of 
alphabets, in the following order: 
a) 7 alphabets; key R 
b) 15 alphabets; key R 
Cc) 23 alphabets; key R 
d) 31 alphabets; key R 

Figures 12 and 13 show some results obtained for the 
first set of transformations as a plot of percentage of 
occurrence of the 32 different characters. As can be 
observed, for the six cases, all the characters have a 
certain number of occurrences in the cryptogram obtained, 
thus giving rise to an artificial language of 32 characters 
witha quite different letter frequency than the plaintext 


of Figure 4. 
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In the same way, Figures 14 and 15 show some results 
obtained for the second set of transformations, which are 
essentially the same as the first set. 

A measure of how different these results are from the 
plaintext is provided by the standard deviations in each 
case and are here listed to provide a means of evaluating 


the results achieved: 


Number of alphabets Key Std. Deviation 


dbs: @ 1.528 
iE) A ToLG 
ibs) C lies 
ibs G BS Pate 
ib) K Ne P25) 
15 N 2S 
7 R 1.467 
Nes, R Taoeo 
23 R 1.407 
a R eros 


These standard deviation values compared with the 3.81 for 
the plaintext, represent a significant flattening of the 
percentage of occurrence plots, or in other words, the 
cryptogram has a more equiprobable letter frequency. 

A significant property of this scheme if we envision it 
as part of a digital communication system, is the fact that 


it offers no error propagation during the message processing. 
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The reason for this is the fact that each character is 
operated upon independently from all others. Thus, if 
there 1S an error in the bit representation of a letter, 
there will be an error in its transformation to crypto 
character or in the decryption of it and no error will 
occur in other characters due to it. 

In the next section, a cryptographic scheme will be 
presented that although contributing to the communication 
system degradation, gives better results in the sense that 
a nearly equiprobable artificial language is achieved 
which represents a significant achievement for security of 


data transmission and/or data storage. 
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VI. THE DATA-KEYED CIPHER 


A. INTRODUCTION 

In this section the data-keyed cipher is presented. 
First, a very general description of the system is given. 
Then the transfer function concept of the cipher and the 
reversibility and consistency of its is explained, together 
with the equated logical form of the transformation which 
the author appreciates as being a very meaningful representa- 
tion of the cipher in logical form. After that the computer 
realization is presented in block diagram form. The test 
procedure for valuating secrecy accomplished and significant 
results are then given. Finally, the communication system 


degradation due to it is analyzed. 


B. DESCRIPTION AND REALIZATION 

Section IV explains how the PDP-11/40 computer is 
handled to realize the simple substitution cipher, con- 
sistency was shown with some examples and further, the 
known cryptoanalytic weakness of it was explained and 
graphically represented by Fig. 4 where it can be observed 
the frequency distribution of the plaintext and of some 
cryptograms and their similarity can be established. 

The data-keyed cipher can be explained in a general 
form as the scrambling of the bits of a character by 
operating on them by past characters, either of the plain- 


text, when ciphering, or of the cryptogram, when deciphering. 


64 





Provided these past characters are far enough apart in 

the sequence their operation on the character to be trans- 
formed will result in a nearly random transformation. 

This idea was supported by the fact that for far enough 
distance between two letters in a written language there 
is nearly no statistical dependence between them. 

Figure 16 provides the conceptual idea of this cipher. 
At this point, two significant characteristics that 
distinguish this cipher are to be emphasized: 

1. From Figure 16(a) and (b) it can be seen that both 
diagrams can be conceived as a transfer function that 
essentially perform similar transformations on their inputs. 
An advantage is that when this is realized in the computer 
by a program, the same program will execute both trans- 
formations; that of ciphering and deciphering. 

2. From Figure 16(b) it can be observed that there is 
no feedback present, that is, the outputs are not dependent 
on past outputs. The significance of this fact will be 
considered at the end of this section when system degrada- 
tion for this cipher is treated. 

The realization of this ciphering scheme again uses the 
basic transformations presented in Section IV, plus addi- 
tional steps are included to accomplish the data-keyed 
function. The conceptual idea given in Figure 16 can now 


be expressed in logical equated form as: 
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Selected delay (1) 









Memory 
(delay) 


Plaintext input Cryptogram output 


Transfor- 


mation 


a) Enciphering 






Selected delay (1) 





Memory 
(delay) 


eammeede hale toed 


Key 
Transfor- 


mation 









Cryptogram input Plaintext output 


b) Deciphering 


Figure 16. Data-Keyed Cipher-Concept 
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el PH ERIN G oe Ce are 


J J 
BeeC lPHE RING : P, = (K + C,_y) see Sot 
where 
P. = present plaintext character 
C; = present crypto character 
Saar = "i" times preceding crypto character 
K = Key character 


Again the operator used is the Exclusive-Or. These 
logical equations show the reversibility of the trans- 
formation and thus its consistency. 

Figure 17 is now presented to give a more significant 
representation of the transformation to be realized. The 
index "i" is selective and it represents the distance 
between characters already explained. 

Figure 18 shows the block diagram of the realization 
of this cipher in the PDP-11/40. 


Appendix D gives the complete listing of the program 


used. 


ee LEST PROCEDURE 


The plaintext message used to test the results of this 


cipher scheme was the one presented in Section IV with its 
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Plaintext Cryptogram 
Pp. 
J 
a) Ciphering: CC. = (K + Caos) + P 
P g ( seul s 
Key 
K 
Cryptogram (+) Plaintext 
eA P. 
J 3 
b) Deciphering: P. = (K + C5_4) + C. 


Figure 17. Data-Keyed Cipher-Realization 
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Substitution 
Program 


(Same as Fig. 2) 





Transform 
ke 


K= (K+ C5 -3) 





Figure 18. Data-Keyed Cipher-Block Diagram 
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statistics representative of the English language as shown 
in Figure 4. 

This cipher, as depicted by Figure 17, has two possible 
choices of variables, namely: 

- The key, with a total of 32. 

-~ The delay factor "i" which could be varied from 
zero, for a simple substitution; up to any number n. 
However, for any choice of n there will be the same amount 
of simple substitution characters at the beginning of the 
cryptogram. This disadvantage can be avoided by using for 
the first letters of the plaintext, meaningless text. 

As for the simple substitution case, the intermediate 
keys were selected to reflect the transformations between 
sets C and D of Table II. 

To ebeeirve the results obtained with this cipher two 
sets of transformations were made: 

1. Using a fixed value of "i" and six different keys. 
For 1 = 7 and the keys: 

a) 
b) 
Cc) 
d) 


e) 


2 A A A YP @ 


£} 
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2. For a fixed key and the following values of "i" 


(Key = J): 
a) i= 2 
b) 1 = 3 
C) i= 10 
d) ae ae | 
e) i= 17 
i) i = 20 


Do RESULTS 

The results obtained for this cipher were, in all 
cases, Significantly better than the Pseudorandom cipher 
of the previous section in the sense that the standard 
deviations were much lower, thus obtaining a nearly 
equiprobable text of cryptograms. 

For the test procedure established, the following were 
the specific results obtained: 

1. For a fixed value of "i" and using 6 out of 32 
possible keys the following were the values of standard 


deviation obtained: 


Key eg Standard deviation 
@ 7 0.5783 
A 7 0.6301 
Sc ii 0.5595 
G 7 Pye loys 2 
K 7 0.5608 
N 7 0.6015 


Ga 





Figures 22 and 23 are some example plots for 
these cases. These figures are shown at the end of this 
section. 

2. For a fixed key, different values of "i" were 
tried. The values of standard deviation obtained in each 


case were: 


Key aes Standard deviation 
J 2 0.5761 
J 3 0.5344 
J 10 Ge525 
J 13 0.5547 
J Ig 0.4609 
J 20 05501 


Figures 24 and 25 are some example plots for 

these cases .and are presented at the end of this section. 

We can now compare these results with the statistics of 
a plaintext English message with a standard deviation of 
3.81 (see Figure 4). A significant flattening of the 
percentage of occurrence plots has occurred. In addition 
the statistical dependence of occurrence of the letter in 
the message has been hidden. The reason for this will be 
explained in the last part of this section where the nature 
of the ciphering scheme is explained in detail, together 
with the inherent degradation to a communication system 


dae to it. 
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In Section IV it was stated, from Shannon [Ref. 15], 
that an ideal cipher may be an artificial language in which 
all letters are equiprobable and successive letters 
occurring independently. This is nearly the case for this 
cipher. Now a simple substitution, such as the one 
presented in Section V, can be performed on the message 
without making it easier to decipher. 

3. A very meaningful characteristic of this scheme 
was the fact that the same program recovers or deciphers 
the message. Figures 19 and 20 present two examples of the 
encrypting results after being processed by ENG program 
corresponding to this cipher. 

To give an idea of the number of occurrences of 
each character in the cryptograms for each of the 12 cases 
of (1) and (2), Tables VI and VII are next presented. 

4, The implementation of this cipher in a digital 
computer can also be seen as the implementation of a code 
where the transformations are dependent on a key (a letter 
or character), the present letter to be encoded and some 


past crypto character. 


E. COMMUNICATION SYSTEM DEGRADATION 

Due to the nature of the process of ciphering and 
deciphering of this system, it can be said that when it 
comes to play an integral part of a communication system, 
Ht, at the most, will double the probability of block error. 


Here the block length has been 8 bits corresponding to a 


(ie 


Peeper eee Se ESI GHEE PRIMER TeV Pie USE CAS OAS fee eae 
eeeeeepe TES tTOIM_IMNPORMAT ION THEGEY_USULTAELE_ Foe Git Ble 
HGIHEERS AND AT SAT Tete Po SAS SUE Oo TA eel es errerel 
Sees SOME UNCER STANGING UF FRESRMAH _ ALCULUS ANOGLELE" 
ENTARY PROEGABICITY_ANCG_IN_THE_LATER_CHAPTERS_SOME_INT@ OD 
Petner SR HMOC PROCESS _ THEGRY_@ UNFORTUNATELY 1 HER eo! = ae 
Petes ee EC ULEEMHENTIOTHATCIS CHARGER _TOLMEET eS 7HE Rene re 


Peed eS LAR EASONAELE_LEVEL_OF MATHEMATICAL MAGUEY 


a) Plaintext message (input) 


CGL EGLO GP@SVELUS IVWITM_ J_G JUCAZONKKEUMNSABYGPLULRFNCHEN 

STGEIVGGZ0BLSELZ HWE.M IVE PONG IY MAAR G@LNHUPO ILYE LIOR INE 
TIC LNGOFH_YSG@_VYASYSRSGUVE OTHEFTISCMOHIVILISA_FAROMOOTR ACS 
MUELVOHCHUL ZUGUT"DKMNZRSPGG IFO. CK LM_USNITPHECUEL EGE 2} 
C_LCUGHANES JUVETTELANCUE MEPS JI IN0SG@ TR_OHUP BABS oO ISN PCY 
HUE OGICGETS IYEG@EYTEMNIIGIPMEGEEKE JIMFELV TIC ELNE IK JOVNGES 
JAZPOGMCL CLEMMSUVOGGUUDTSOLA NOS _ MHEPK GUY IGCALLGSERR EL Seal 


MEMNGORT IRFAPHP IGS. EPYOLUWI TK EOE eas 


b) Cryptogram message (output) 


Figure 19. Data-Keyed cipher 
Encrypting process 
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ee a ee Oe EP eS A EL TTS Ce Rete >: Rh alo 


—_+ of 


a 


ieee sees 2 OSE RT CNEVer Se NAR Leer Ore se oS eh heey eee: 


*o mem me! oe! two ee ) | ce! om 


Meee Ee PEA TOIN CI BRPOURMNATION TAREE SU TALE AP ar bia 


_—_ 


= 
Pree es’ (SHO MATHEMATIC IPNS@_1T_ITS_ ASSUME THAT ae eee 
eet ONE _ UMOERSTANCING OF _PRESHMAYCALEULUS eG ELE 
Beret ir. 5’ 2 me tas Oe PUT HES UAT ERO HAP ft Eee Si eee eit 
Piro SAW OUMN UF EGCESS TREQEY ee _ UNFORTUNATELY THERES? So 


Beer ere CUTREMEMT THAT LE_HRECER _TO_LMEET Ce IT HE peeve hi 


Peedi 2 HORERSUNAELE LEVELLOP _HATHEMA: TURP Ar ibs. 


a) Plaintext message (input) 


P@S IGEVOC _GP@SVELETEG@PMNI_ J_GIUCAIVILLERTAREYGRP_LOAITOVUT 
G.GSNTGRIVGG IHGETS LENSES MIVLMN EGNOS MARE LNRM SE OUNE OR Tey 
TESHOVCRO_LVYN@ VAST J@RONVTHFTISLYOMONE MTS FARO MORSH ID 

_YELVGHCHES INGESYORMESZR “SHEVEAPHE@S CK WSN ONHILORRC EVE J] 
CMEPG@OPIES JUVE" TENMFESRBEY_EPS II JNOT@GCURHOUP SAECO ON CADE 
fees iCGeSe C2°BGAGTEMLIGIP_L@E ILL Ee IMFELVY IS EILESL IOV NOUR 
TF JIHV ION CLENHSUYCG@ERCNCOLSAMOS_ NOLYL IR OTNOSLL@SERU IS IGHS 


JEMGGRT JAMFARPMMVORPVGLUMISKEE NOS CTSOSOMSE YSN HEONEMOLE 


b) Cryptogram message (output) 


Figure 20. Data-Keyed cipher 
Encrypting process 
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Character 


DL NON KMS SGOCHNDWOVORZEPAOUHROAANHAONW yea 


@ 


36 
35 
35 
55 
47 
46 
47 
50 
41 
38 
34 
47 
44 
42 
29 
374 
ape 
43 
50 
a6 
=. 
40 
al 
38 
a), 
64 
43 
ay 
52 
Sak 
52 
52 


Table No. 


NUMBER OF OCCURRENCES 


K Ex (i= 7) 
A E G K 
a3 40 46 45 
38 Bi) 40 40 
40 338 32 32 
50 ape 52 os: 
42 56 50 42 
Syl 52 49 46 
55 41 42 44 
42 41 40 46 
30 48 BS 43 
44 44 38 41 
41 28 2) 29 
40 40 44 38 
a7 34 47 48 
49 39 45 45 
29 32 PAS) 29 
a2 42 38 of 
37 ©. 47 38 26 
2 48 44 48 
DD 45 43 61 
ae 62 60. Gal 
59: 42 51 49 
54 43 47 50 
Ske 48 S10. 52 
38 49. wy 50 
G2 45 54 56 
61 oye: 56 53 
a7, 54 40 38 
43 Syl at 52 
40 46 a7. BN, 
63  ~—<58 ays. Sa 
BZ 46 60 42 
Diz a7 ay 56 
VI .- Data-keyed cipher 


Table of number of 


OCCULrLeNCes. 
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Character 


SENNOIN KM SE ICG HANWOVWVORZ BOAR GUHMOAAROANAWP@® 


NUMBER OF OCCURRENCES 


" i " VALUES ( KEY = J ) 
2 3 10 13 ily, 
a7 42 40 a2 42 
41 40 36 £5) Al 
48 39 49 34 36 
44 a7 Sue 40 29 
34 43 47 41 41 
43 Al 46 49 50 
47 43 35 47 42 
45 46 48 39 40 
48 39 44 33 48 
38 36 34 53 45 
32 54 36 46 42 
52 42 40 38 41 
41 42 37 38 40 
37 41 34 44 36 
45 28 52 48 35 
26 45 42 41 50 
44 46 49 59 51 
36 52 58 50 48 
61 36 46 a) 47 
46 65 37 56 48 
60 62 43 43 52 
49 50 47 54 56 
54 44 45 55 40 
46 50 62 38 50 
43 58 53 36 46 
49 42 51 49 49 
44 45 41 49 57 
44 57 53 55 49 
60 50 48 40 39 
54 42 62 46 55 
52 50 5 55 53 
52 45 44 56 54 


Table No. VII.-.- 


Data-keyed cipher 
Table of number of 


OcCuLrentCces. 


77 





byte. It must be emphasized that, although for ease of 
computer realization the 8-bit byte was used to represent 
a letter; only 5 bits could have been enough since we are 
using only 32 letters or characters. 

This increase in probability of error can be said to 
be significant but with the availability of error correcting 
codes the initial probability of error can be reduced as 
desired and appropriately so that doubling it when using 
the cryptosystem will not be that significant. Further, 
since a computer is being used to implement it, it also 
can be used to realize a suitable error correcting scheme. 
In the next section, a suitable error correcting scheme is 
presented, that will essentially overcome this degradation. 

The examples that follow are intended to explain how 
the probability of block error is doubled and also the 
existence of a transient simple substitution for the first 
"i" characters. 

Based on these two examples the following observations 
can be made: 

1. There is a transient simple substitution for the 
first "i" characters when enciphering. This is the case 


OF C., Co and C. from Example l. 


1e 
2. After the transient simple substitution, the crypto 
characters are a result of a number of plaintext characters. 


And, the higher the index of the crypto to be obtained, the 


more the number of plaintext characters on which it depends. 
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Example No. 1 Enciphering process 


Transformation: C; = 


(ee C5-i? eee 


i y) 
Plaintext sequence: PyrPorParP yr Pes Pe yPosPo Pa 
Let i = 3 
ees ok + PS 
Cy Seer ani 
oe OK 
eee tee Pe = |) Kt (KS Pl) oe = P, + P, 
Ce = K+C, + Pe = K + (K + Po) + Pe = P. + Pe 
Ce = K + C, + Pe = K+ (K + P.) + Pe = P. + Pe 
Ca = K+C, + Pi = K + (Py + Py) + Po 
oe Ce Ps y= Kot (P, + Ps) + Py 
wees Kt Cot Pg = Rt (P, + Po) + Py 
Cio = K+ Co + Pio = P, + Py, + Po + Py 
eee oe ale oe, oe 
Cig = K+ Cy + > eee P. + Pg + Pio 
Seen lee ia) a a ae a 7 Sto, ee 


tee, 


4 
f 








Example No. 2 


Cryptogram 


Let i = 3, 
2) 
ae (CK Ot 
Pe kt 
ye OK 
oo) eee 
oe + 
PK 
ee 
DS es 


Deciphering process 


Transformation: P. = (K + C4_3) Oe 


sequence: Cy 1 Cg 10310 yr Co 1 Ce 1 Ca 1g Cg 


as before 
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- a 7 7 7 
a - ye. 7 a _ 
~ 
. SA Poe a 
7 7 
a) 
: ha —_ 
= : 
7 7 
7] 
a : 
a 
_ 
7) a 
2 
7 
- ; 7 
7 
a a 
Wier a 7 7 
: a 
- _ 
a 
a 





3. The order of dependency observed in Example 1 is 
different for the deciphering case, where the recovering 
of the text is just dependent on two crypto characters. 
Thus, one error inthe crypto sequence will just give rise 
to two errors in the plaintext. 

Figure 21 gives an example of the transient simple 
substitution explained. The value of "i" chosen there 
is 50. As an example it can be observed here that for 
the first 50 characters of the plaintext the.letter R is 


always substituted by the letter C. 


Spee 





ive senna e Ante be OF ALC YGLICS ERR UR LOR RECT LNG leer ore 
Reto (SHI CIPHEREOSHESSAGE_ -oN MISE GENERATED TNS a SiG 
ieee (OUST HOSA OCE PC LUSTRE. NG SSHGELTUCTES | Si tee Bees 


MeENESS Ur  THE_COGES 


a) Plaintext 


Transient substitution 


=a ea ee 


MEVEREMSENP _LNTIPSAJTNOMNPNEHE IRENTCOCOCNR EET RES _ VNR CRE 
CUZZUGKEGPESUENSDSUG SN @ONTEIMMG IV@SMUP IGk Cek@ a7 TE MNF ONE 


GHEE _GL_ULCPOCMSDGFRPSFEZIFP_CHSOH_TOGOEOG IE MOYNHEEMNCE _PERVPRP IG 


THU _WEHT G@NGY CRaAQSNE 


b) Cryptogram 


Figure 21. Data-keyed Cipher - Example of 
transient substitution. i= 50. 
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L=tT yw = Ady 
TOE9°O = UOTRPeETASP pzrAepue As 
zeydto pexay-ej4eq °*7ez eanbty 


a0uUeTANIIO 


jo 
obequsd1i9edg 
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L=tT ) = Avy 
GS6ES°O = UOTRZeTASp psrepueyzs 
Zaudto pakay-ezeq ‘“*E€zZ sanbty 


SouesTANIDIO 


yO 
abequsa019d 





8 4 








c= T coo 
TOS°O = UOTReETASpP prAepUueAS 
zeydto peAesy-ejeq * Pz eAanbty 





. OT s0uezAZNd5D0 


jo 
abejusdied 


- 02 


85 








LT =T c= Aoy 
609P°O = UOTReTASp pzAepueAS 
Zayudto peAsy-ejeq °*Gz oanbty 


aoduerANdDdN0 


jo 
abejusecieg 
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VII. ERROR CORRECTING SCHEME 


The data-keyed cipher of the last section offers to 
the system a degradation in the sense that the probability 
of word error is doubled due to the nature of the encipher- 
ment process, aS was explained. This increase in error 
will undoubtedly affect the legibility of any message. 
Thus it was necessary to look into error correcting codes 
that will eventually overcome this present disadvantage. 
Again the availability of the digital computer proved to 
be very useful for enciphering the message and to encode 
it for transmission. 

The error correcting code developed was intended for 
transmission over a memoryless binary symmetric channel. 

A memoryless channel is the one on which noise does not 
depend upon previous events. A binary symmetric channel 
is one for which the probability of a zero to be changed 
to a one, is equal to the probability of a one to be 
changed to a zero, during transmission. 


Notation that will encountered through this section 


follows: 
k = Number of information digits 
m = Number of check bits 
n = Code word length (n = k + m) 
e = Maximum number of correctible bit errors 
in one word 
R = Data rate (R = k/n) 
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8B = Binary symmetric channel parameter 
p(1/0) = p(0/1) 


aq = Hamming distance between code words. 


A. BEST CODE DETERMINATION 


The noise channel theorem as stated by Shannon [Ref. 14] 


Let a discrete channel have the capacity C 
bits/sec. and a discrete source has the 
entropy per second H. If H< C there 
exists a coding scheme such that the output 
of the source can be transmitted over the 
channel with an arbitrarily small frequency 
of errors. If H»>C, it is possible to 
encode the source so that the equivocation 
is less than H-C+t+e , where ¢€ is 
arbitrarily small. There is no’method of 
encoding that gives an equivocation less 
ehane BH = 'C -; 


The discrete source entropy for long messages consistin 


of discrete symbols is given by 


n 
Hie y=. = 2 p, log p; 


i=l 


where P; is the probability of occurrence of a given symbol. 
In the situation where the symbols are transmitted over a 
noisy channel a given symbol x, may be received as Y;° 
Shannon's measure of uncertainty at the receiver of what 
was actually transmitted is defined as: 


be 
> aes 
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For the binary symmetric channel this uncertainty is given 


Dy : 


H(x/y) = - (B log B + (1-8) log (1-8)) 


Then the channel capacity is given by 


Coe= Fix) Hey) maximized for H(x) . 


A significant parameter commonly used is the probability 
of word error in the message instead of the uncertainty 


measure. The probability of word error is defined as: 


Number of wrong decoded words 


P(e) = “umber of words in message 


It must be noted at this point that there will not 
necessarily be a code word for each ASCII character used. 
In fact this was the case for the code implemented, where 
each 4 bits of the message sequence is encoded into a 
15-bit word. Thus, each 8-bit ASCII character was encoded 
into two words for transmission. 

A "best code" means one that has least probability of 
error for any give channel 8 and the highest rate given by 
the ratio of information bits over the bit-length of each 
code word. The error correction ability of the code can 
be derived from the Varsharmov-Gilbert-Sacks condition 


(upper bound) 
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Ze-l 7 
om ‘ : ee 


i=0 i 


which is a sufficient but not necessary condition. And 


from the Hammings lower bound inequality 


which is a necessary but not sufficient condition for 
designing an e-tuple error correcting code. 

Conversely, using these conditions, once a code is 
chosen and specified by its rate (R) and code word length 
(n), the number of correctible e-tuples can be determined. 

The theoretical value of probability of error is given 


by Ash [Ref. 18]: 


e : 
pie) = 1 = - Ne eon 


where N; is the number of correctible e-tuple errors, and 
e, = O,1,2,..., up to the maximum number of correctible 
errors per word. 

The Hamming distance (d) is the minimum distance between 


code words. If d happens to be even and the maximum value 


of e is given by (d-1)/2 , this will yield a fraction: 
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Then the number of maximum e-tuple errors is given by 


Shiva [Ref. 19] 


ea) 
Number of correctible d/2 errors _ l- 2 
Total number of d/2 errors 7 a 
d/2 
d! 
where Lo = ws ae 
(S) 15)! 


For the same channel (8 constant), reducing the probability 
of error results in a reduction of the code rate. Working 
backwards, for any given probability of error and word 
length, one can estimate the information length and code 
rate by using the Varsharmov-Gilbert-Sacks condition. 

In the present work a cyclic code with a rate R = 4/15 
is implemented to overcome the degradation due to the noisy 
channel. Its effectiveness was tested by simulating trans- 
mission over a binary symmetric channel with different 


values of &8. 


B. THE (15,4) CYCLIC CODE AND ITS COMPUTER REALIZATION 
The theory of Cyclic Codes and their representation by 
means of a k-stage feedback shift register is very well 


treated by Ash [Ref. 18]. 


1. Selection of Polynomial 


In order to be compatible with the 16-bit organiza- 


tion of the PDP-11/40, the characteristic polynomial for 


OL 








this code was chosen from Appendix C of Peterson [Ref. 20], 


and it was 


which is an irreducible polynomial and which can be 
represented by a 4-stage shift register as shown in Figure 
26. Since G(x) is a maximum period irreducible polynomial, 
with a period eal = 15, it divides the polynomial 

a 1 (modulo 2). Thus, the check polynomial for this 
code will be 


H(x) = aa Oe ee ee i se 7) ee 


The polynomial chosen originates a (15,4) cyclic code, 


that is, a code where 


k = 4 
m= 1l 
n= 15 


The coefficients of the check polynomial for the code 
word 00010011010111. Since the code is evelic,vany Cyclic 
shift of the check word and any linear combination of code 
words is another code word. This property of the cyclic 


code represents an advantage for decoding purposes. 


om 


eS 
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oe Computer Realization of Encoder 


Encoding in a digital computer is accomplished by 
realizing the shift-register operations by implementing a 


matrix multiplication of the message word by a generator 


matrix. 
The generator matrix for the characteristic poly- 
nomial G(x) = at + x + 1 used, was 
ie O. O::0° dO Od. le cO le Oe lee 
[Gc] Oo 0.0: Pero Cr 0 21 i 00 
ay OO £100: yd. Or rae 0se i ee ao 
O80 0-1. 0-0 1 Prog O 1s 


which when multiplied by the message word [x], 4 , yielded 
the code word as ° 

A further comment can be made on the structure of 
the generator matrix: The four rows are code words and 
they are linearly independent, and, any of the other code 
words can be obtained by linear combination of these four 
rows. For ease of computer implementation, to obtain a code 
word it was only needed to exclusive-or the rows of 
[G], 45 where a 1 occurs in the message word. For 


example, 
[X] =1100 (message word) 
1,4 
Berst orow of G =) 0°00 1)0 Oat tier! Ss 


Second row of G=O0O l0O1ll1lOlLOL1LILl1Ll1O O 


a a SS 


Code word 1 7 oO. 0. Or 1. 0 Oa 0: 2 Oa 
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Appendix E shows the complete listing of this 

encoding program. 
3. Minimum Distance Decoder 

Table VIII gives the code words for the 16 possible 
message words when the (15,4) cyclic code is used. It can 
be observed that the Hamming distance between these code 
words is 8. That is, the number of different digits between 
code words is 8 (d = 8). 

With the minimum distance decoder, if any combination 


d-l : ; ; 
of 5 or less errors occur in a received code word, it 





can be corrected with absolute certainty. For this code, any 
3 or less errors can be corrected successfully. 
For the case when 4-digit errors occur (e = 4), the 


Varsharmov-Gilbert-Sacks condition (Upper bound) 


m eee Tse 
2 Py i 
1+0 


is not satisfied and thus there exists an uncertainty on 
whether a 4-digit error will be corrected. It has been 

found experimentally that 67.8% of different combinations 
of 4-digit errors can be corrected. Appendix G shows the 


complete listing of the decoding program. 


C. NOISY CHANNEL SIMULATION 
Table IX provides the expected probabilities of error 
for transmission over a noisy binary symmetric channel when 


using the (15,4) cyclic code presented, as given by 
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Information Coded Word 


Word 

00 0 0 07:0; °0 <0:°0: 0500 70.070 10) 0 20 0 
0001 O00” O23 0a lel OleOle, <a! 
Oe Or°1 0 On Oa 0.02 Pele O eel Ode i Tele 0 
oO 1 1 0) 0 ar ec Ba 0 pea ger} IL dee 20.5050) 2h 
O10 O12 00 1 B01 0 P11 00 
ie oO: 1 Or1 0 1 lL Ber 0r 020 ei 0S 0m ia 
O71 1 0 OvAT I 0-10 1k 1 AsO Oro eG 
Owl 1 1 Orsi 1 L°Or0: OURO Cire Om 
zo 0 0 Fo 0'0°> 015070 120 ft Oe rire 
1001 100-1 10.1.0) ie tO eeeG 
iO, 1.0 2: 03°20 A 100 Ose 0 Care 
eeOmeL, 1 LoOliIiirooor@gort 

1 0 0 Eb 0-40 “0-12 O10 ae 0 ald 
im. 0 1 LS Od, tO ae 50m 0?2 0 eat 6 
mi 1 0 ie 1.00) OSL OVO vies: ine an 
ier 1 1 dd 210.20 0 ae DAE 100 


TABLE VIII. Message words and their correspondent 
code word for the (15,4) cyclic code 
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Sa eS ya SS yaya Sp ee 


joing ale Probability of error P(e) 
a0 to tee 
0.07050 5.4480 x 107° 
0.09797 2917 base Oe 
0.12426 6. 2405Ex 108 
0.13992 1.2542 x 107 
0.1709 1.8780 x 10-2 
6.26613 4.9052 x 10+ 


ne a a EE 


TABLE IX. P(e) vs. channel 8 for the code (15,4) 


Cetinyilmaz [Ref. 21]. In the same reference a noise 
generating program is presented to simulate different 
conditional probabilities of error for the BSC. The same 
program was used in this thesis to simulate a noise BSC 
and to test the effectiveness of the code implemented. 
Appendix F gives a listing of the program. 

Having the enciphering scheme, the error correcting 
code and a mean for introducing noise into the message to 
reflect different values of 8 for the channel, all were 
combined to simulate a Secure Digital Communication System, 
as depicted by Figure 27. 

The following is the complete program flow for the 


system: 


> 











STON 


werbetp yoo tq 
wa3sAs uoTtzeotTunUMIOD TeATHbtp eanoas 


Zepoouq fe Toepooug 
o7dAX) 30INOS 


“Le eanbty 


SOInos 
UOTFEUIOF UT 
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a) Input program (address 20000 to 20036) - The message 
is typed in. The program stores the message in ASCII code 
form into memory locations 30002-32000 (16-bit form). 

b) Data-keyed cipher program (10000-11044) - The key 
to be used is typed in, the program stores it at 30000. 

The program takes the message from 30000-32000, ciphers it 
and then stores it at 40000-42000 (16-bit form). The 


parameter i" can be selected at address 10014. 

c) Input interface program (14000-14036) - This program 
puts the ciphered text, already in 16-bit form, into 8-bit 
form to be handled by the encoding program. 8-bit charac- 
ters are moved into memory locations 51000-52000. 

d) Encoder program (14040-14152) - Encodes message and 


stores coded words into memory locations 52000-54000. 


Generator matrix is stored at 


Memory location Content 
50200 104656 
50202 46570 
50204 23274 
50206 11536 


e) Noise generating program (14540-14754) 

f) Noise mixing program (14756-15050) - Takes coded 
words from 52000-54000 and exclusive-ors them with noise 
words at 32000-34000, thus introducing noise into the text. 


Results are stored back at 52000-54000. 


a 





g) Minimum distance decoder (14154-14436) - Takes the 
distorted coded words from location 52000-54000, decodes 
them if they are correctible and stores the decoded words 
at location 56000-57000. Check polynomial is 11536 at 
address 50104. 

h) Output interface program (14440-14464) - Takes decoded 
words and moves them to 30000-32000 to be deciphered. 

1) Data-keyed deciphering program (10000-11044) - Same 
as (b), the only change needed is to change the contents of 
address 10012 from 40002 to 30002 to be compatible with the 
Gecipherment process. The program deciphers the message 
and stores the results in memory locations 40000-42000. 

j) Output program (12000-12244) - Prints the cryptogram 


and the plaintext message. 
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VIII. SUMMARY AND CONCLUSIONS 


After looking at the computer organization and 
establishing a basis to realize reversible transformations, 
three cryptographic systems were implemented: 

1. Simple substitution 
2. Pseudo-random cipher 
3. Data-keyed cipher 

The first, provided the basis for the other two. It 
was not intended to provide any significant amount of 
security since the cryptanalytic weakness of a simple 
substitution is well known. 

The pseudo-random cipher is provided with a means to 
do polyalphabetic substitutions. This kind of cipher is 
known to be time consuming when done manually. The algorithm 
used to generate pseudo-random keys was a simple one, 
though it can be as complex as the user desires. 

With the data-keyed cipher very significant results 
were obtained in the sense that its distribution plots 
were fairly flat. A disadvantage presented by this cipher 
was the error propagation when deciphering. This fact 
motivated the author to look into error correcting codes 
to use them with this or any other system. A (15,4) cyclic 
error correcting block code was implemented. This code 


contributed appreciably to reduce the probability of error, 
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P(e), when transmission was simulated over a noisy binary 
symmetric channel. 

Finally, it can be said that the digital computer is 
Suitable for encrypting and coding data for transmission, 
providing at the same time many different alternatives for 
both functions. With the advent of microprocessors and 
with communication systems tending to become all digital, 
it is certain that we will see in the future a computer 


performing these functions together with many more. 
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